On 7/19/05, Tomas Larsson <[EMAIL PROTECTED]> wrote: > Doing a netstat on my server, I find a strange connection. > > It's a crond-job with Apache as owner, and it seems to go to an > irc-server, called 193.110.95.1:ircd, "carouge.ch.eu.undernet.org", anyone > that knows what this is??
You've almost certainly been hacked due to some flaw in a program you are using with apache. A likely culprit is phpbb. Joshua. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
